Koot by Datakoot
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
claude mcp add --transport http koot-by-datakoot 'https://koot.datakoot.com/mcp'
{
"mcpServers": {
"koot-by-datakoot": {
"type": "http",
"url": "https://koot.datakoot.com/mcp"
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
Koot — by Datakoot
One call that does the work of many lookups. Koot briefs your AI agent on a software stack, a public company, a domain or a US place, and answers in one line, with the details underneath.
https://koot.datakoot.com/mcp
No API key for the free briefs (5 a day). Built on the nine Datakoot official-data servers.
Tools
| Tool | What it does | Sources |
|---|---|---|
brief_stack | "Is my project safe?" Checks every package for known vulnerabilities, ranks them by real-world exploitation (CISA KEV, FIRST EPSS), flags abandoned packages and npm malware placeholders, and returns a fix-first list | OSV.dev, CISA KEV, FIRST EPSS, npm / PyPI / crates.io |
brief_company | A US public company in one call: SEC profile, recent filings (8-K material events flagged), insider trades and reported financials | SEC EDGAR |
brief_domain | A domain in one call: registration and DNS, email security (SPF/DKIM/DMARC), tech stack, subdomains from certificate logs | RDAP, DNS, Certificate Transparency |
brief_place | A US place in one call: current conditions, forecast, active alerts for the state, nearby earthquakes, elevation | NWS, USGS, US Census |
koot_watch | Pro. Tell Koot once what to watch (packages, a pasted package.json, and/or company tickers). Optional daily alerts to Slack or Discord | |
koot_whats_new | Pro. "Anything new?" Reports only what changed: newly exploited or likely-exploited issues in your packages, and new SEC filings from your companies | |
koot_watches | Pro. Lists what Koot is watching | |
koot_unwatch | Pro. Stop watching some or all items, or turn alerts off |
Quick start
claude mcp add --transport http koot https://koot.datakoot.com/mcp
Or point any MCP client at https://koot.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
curl -s https://koot.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"brief_stack","arguments":{"packages":["lodash@4.17.15","express@4.17.1"]}}}'
The koot field answers in one line, for example: "⚠️ No confirmed exploitation, but 2 issue(s) have a high exploit probability (EPSS ≥ 10%). Fix first: npm:lodash@4.17.15."
Or just ask your agent:
- "Is my package.json safe to ship?"
- "Brief me on Tesla's recent SEC filings."
- "What's the weather risk in Pine Grove, PA today?"
Pricing
- Free: 5 briefs a day, no key, no signup.
- Pay per brief: $0.01 in USDC on Base through x402, with no account, at
https://x402.datakoot.com/mcp. - Pro ($15/mo): unlimited briefs, plus Koot Watch. Send your key as
Authorization: Bearer <key>(orX-Datakoot-Key: <key>). Pricing.
Data & attribution
Data comes from official public sources: NIST NVD and CISA KEV (US public domain), FIRST EPSS, OSV.dev (CC-BY 4.0), SEC EDGAR, the National Weather Service, USGS and the US Census Bureau. No API keys. No signup. No data resale.
Part of Datakoot: official-source data for AI agents, one keyless call.
الأسئلة الشائعة
ما هو Koot by Datakoot؟
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
كيف أثبّت Koot by Datakoot؟
يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http koot-by-datakoot 'https://koot.datakoot.com/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج Koot by Datakoot إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل Koot by Datakoot مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص MIT.
من يصون Koot by Datakoot؟
ينشره datakoot. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.